Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
File: lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft (raw, json)
Hash identifier: YuieqhYJkCGeePeD2oBOke7X0pmmsONCTFl0pMKpxgI=
Subject key identifier: 86:CB:66:98:90:1D:37:9D:FC:4F:84:AA:BA:EE:D5:97:26:E5:B7:5F
Authority key identifier: 94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
Certificate issuer: /CN=949ff40831ca66f996c76ea466af49476fecd1ff
Certificate serial: 019D25F1646C646BF0097390FD533D846034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
Manifest number: 1665
Signing time: Wed 25 Mar 2026 17:01:09 +0000
Manifest this update: Wed 25 Mar 2026 17:01:09 +0000
Manifest next update: Thu 26 Mar 2026 17:01:09 +0000
Files and hashes: 1: UipotQ-uJFFtPyyGfsmm8VGPq_Y.roa (hash: 1ArIsx9oTls8tQ2A71LvIPypaXRgZmQimvwpiodxUUE=)
2: WOZGN68ORC_fjS0NcqSjNDVXKaY.roa (hash: AjRBGSZk8zOXbmkuoK7ZV4c6kcxCjWb+oPTXu10gwFM=)
3: lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl (hash: CwbnyW/qo1WGQlTZnklQmY1tEL/sUefrarnelkT5pmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:64:6c:64:6b:f0:09:73:90:fd:53:3d:84:60:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949ff40831ca66f996c76ea466af49476fecd1ff
Validity
Not Before: Mar 25 17:01:09 2026 GMT
Not After : Mar 26 17:01:09 2026 GMT
Subject: CN=86cb6698901d379dfc4f84aabaeed59726e5b75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fc:92:bc:9b:0d:6d:b9:92:b8:52:3d:7f:35:
8f:d4:84:e5:50:cf:96:9f:40:01:77:2a:eb:fc:2b:
61:1d:a3:8f:fa:16:b3:ba:f9:01:a2:05:58:97:95:
26:cb:f7:24:2d:2b:f8:d5:8e:b0:af:2d:8f:da:63:
f4:d3:d6:4a:2e:dc:f4:f1:a6:a6:6a:85:fb:5b:c8:
a8:6f:98:12:09:e7:53:75:ed:86:79:8d:03:a2:ce:
b6:00:8a:36:a1:a5:6d:f0:6c:19:31:f1:bf:b7:65:
9c:47:71:a3:c1:14:38:a7:df:5b:ab:17:ef:bf:1a:
6e:b2:b2:1e:c8:e2:07:ca:a1:4b:68:78:93:09:5e:
4b:65:24:6e:02:60:2f:01:0b:57:85:b2:e8:7a:14:
30:f5:92:71:5e:73:b4:86:12:13:e6:fb:e4:f0:ef:
40:63:fb:2f:68:a7:c5:3a:50:2c:68:b7:e2:ef:e6:
63:51:a0:93:86:44:e0:1b:b9:e2:ee:80:41:5b:53:
86:f3:46:82:5c:9f:94:8a:d5:4a:d7:e5:c8:a9:4b:
91:df:31:e8:b1:79:84:42:57:ce:3c:04:3e:ba:14:
33:3e:a6:97:29:c6:bb:73:d9:18:06:ae:94:9c:71:
f5:e0:62:a9:35:f1:48:a5:a2:a8:cd:99:5a:b3:67:
a0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CB:66:98:90:1D:37:9D:FC:4F:84:AA:BA:EE:D5:97:26:E5:B7:5F
X509v3 Authority Key Identifier:
keyid:94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:97:97:7d:4e:da:77:6d:0b:ba:13:e9:de:e8:89:b4:2a:20:
83:b0:2d:7c:cd:2d:fc:da:54:60:8d:18:61:7b:a9:01:71:6d:
07:88:13:7e:82:be:a3:94:5e:bc:77:8e:cb:23:f9:93:ff:0e:
e1:0e:aa:8a:e6:1d:9a:d3:ba:9a:28:ad:00:80:77:bc:cd:29:
b1:79:e9:58:dc:90:47:a0:d3:37:09:63:be:b6:6c:f0:55:3c:
0a:c1:a5:05:4b:01:ce:63:a8:58:e9:09:c4:98:a0:e5:4a:42:
0d:88:b4:98:0c:17:16:c2:81:25:20:23:29:60:9b:5c:49:e5:
52:75:a6:fb:e3:83:a9:1f:79:91:73:7b:03:e7:8e:a8:56:93:
2f:e6:ea:c7:f3:3c:dd:50:6d:e1:c1:b1:3a:f1:07:fa:43:3d:
46:99:5f:94:75:74:8d:82:96:0e:51:6f:98:dc:3f:a3:3a:b1:
d1:e8:23:9d:24:2e:a5:47:ac:64:73:59:7a:30:40:75:e1:73:
9d:57:cb:56:51:ad:72:88:5a:82:83:9c:16:5d:15:14:fe:2b:
5f:d1:21:5e:2c:84:37:9f:59:a3:ce:69:7e:22:9b:14:0e:3d:
b2:26:bc:51:67:51:f7:22:16:b0:68:d2:6d:7b:b1:65:88:64:
8b:4e:93:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:32 2026 by rpki-client